Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File:                     ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier:          rrSBw9d+1p3Vhi6giANWDMoBiY7p+EBiJzYb2HYwdY8=
Subject key identifier:   44:0B:02:3B:20:AA:46:0E:51:BD:F7:75:CC:20:B9:85:60:D9:79:F7
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer:       /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial:       01936857E2E96DFD8EE8A2EC29DD3A2F159D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number:          0358
Signing time:             Tue 26 Nov 2024 12:00:10 +0000
Manifest this update:     Tue 26 Nov 2024 12:00:10 +0000
Manifest next update:     Wed 27 Nov 2024 12:00:10 +0000
Files and hashes:         1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: cEaaYIC8Z/Q3dNEPUVIQUFrHINgNKgDxDZxVw3YVzNY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:57:e2:e9:6d:fd:8e:e8:a2:ec:29:dd:3a:2f:15:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
        Validity
            Not Before: Nov 26 12:00:10 2024 GMT
            Not After : Nov 27 12:00:10 2024 GMT
        Subject: CN=440b023b20aa460e51bdf775cc20b98560d979f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fe:dc:c2:a6:dd:bd:09:25:e4:4e:c6:c8:b7:
                    e7:59:e2:4a:22:04:d1:df:c1:8c:ca:2d:26:79:06:
                    97:20:1c:a0:a0:4b:80:32:7c:89:e0:43:ba:81:84:
                    1d:09:53:07:65:63:95:6d:09:87:89:db:e0:c6:d6:
                    ca:73:4c:0a:bd:32:88:63:40:9a:f3:14:b4:fe:91:
                    fb:80:70:23:1a:63:ed:27:4e:a5:e0:cf:6d:fc:80:
                    e6:65:ad:97:c4:84:f4:b4:e8:7c:43:9f:ef:0c:7b:
                    92:1e:a5:17:9e:a1:e8:02:46:f7:28:49:1c:16:ac:
                    5d:7a:97:2a:ce:57:92:f2:f6:3f:91:12:17:93:32:
                    dd:b8:90:a0:14:22:54:10:2b:d4:9a:72:43:b2:ad:
                    c3:c3:78:53:00:fb:b3:67:f6:77:cf:07:0d:5a:45:
                    01:4a:06:c6:bf:3e:4d:1f:e2:f0:f2:69:9e:cd:e6:
                    6b:44:be:6e:9e:8e:78:12:58:42:02:6d:7a:5b:21:
                    61:b3:d2:04:ce:0d:23:bf:dc:ba:65:7a:e8:24:35:
                    e2:de:a1:e5:37:e2:ff:d7:4f:7c:05:eb:16:d8:62:
                    e1:e5:89:3d:d1:14:66:a7:e6:ce:53:34:bb:69:7b:
                    78:e6:73:11:39:6f:c4:06:4d:59:3d:42:ee:88:5c:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0B:02:3B:20:AA:46:0E:51:BD:F7:75:CC:20:B9:85:60:D9:79:F7
            X509v3 Authority Key Identifier:
                keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:78:87:22:41:5e:79:31:6a:f8:ab:bc:a2:bc:e4:18:7d:c2:
         da:f8:30:da:c0:0c:54:15:ff:e8:07:13:c6:e8:98:e9:2a:dc:
         7b:a3:eb:aa:28:39:8e:16:f2:74:ae:31:80:ac:03:36:38:1a:
         8c:ec:30:00:d7:63:31:4b:e1:11:31:69:d5:f2:84:c1:80:57:
         03:4d:e2:51:1e:21:ee:9b:ad:a3:d6:03:02:49:f3:bd:f6:30:
         da:9d:4c:5b:69:53:c4:82:24:b4:c9:f8:30:99:5d:72:c1:24:
         d6:5d:6e:38:c4:b4:eb:5d:ac:fa:b4:be:a1:b1:ff:c0:17:12:
         0c:93:74:80:4a:4b:b2:2e:35:0b:09:e9:fd:03:1b:75:bb:55:
         7f:9d:42:68:7e:c3:66:69:e6:fa:25:5d:84:df:e0:28:24:9b:
         84:8f:5e:f7:e5:ad:eb:0a:8a:4d:11:81:1b:56:7b:1f:e1:9e:
         a4:c4:73:95:30:32:32:a4:3d:c2:08:6c:5f:79:7a:66:d3:53:
         54:2f:bf:13:31:be:5f:cf:a5:56:76:53:06:a2:c0:a2:ce:6c:
         2f:83:58:29:5d:0f:26:a3:ab:36:45:9d:10:ee:33:55:8b:65:
         dc:d5:ce:ba:a1:c7:e7:77:bc:98:dd:1e:c2:ff:de:01:34:bc:
         9e:93:3d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:35 2024 by rpki-client on console-fra.rpki-client.org